CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4

Risk score: 65/100
CVSS: 10.0 v3.1
Published: 1 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: A critical vulnerability (CVSS 10.0) in the WAVLINK WL-WN579A3-A device allows an attacker to perform OS command injection remotely, potentially leading to a complete compromise of the system.
Affected: {'products': ['WAVLINK WL-WN579A3-A'], 'packages': [], 'versions': ['2026-03-10-94f93d4']}
Fix: Check the linked advisory for a fix, as none is provided in the record.
Exploitation: Public proof of concept

Why it is Amber

CVSS 10.0 critical
Remotely exploitable without logging in

References

Original description

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Last activity 1 Nov 2026. Patch Forecast updates every hour.